Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
File:                     2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json)
Hash identifier:          J7rc2OZrOvhIOw0qANqvqKiRZcxdrqHZY8BAxeYTr8w=
Subject key identifier:   63:94:4B:57:E7:89:3B:1E:40:98:57:49:53:D7:E8:C2:D0:8A:E7:74
Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D
Certificate issuer:       /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
Manifest number:          0685
Signing time:             Tue 12 May 2026 22:36:00 +0000
Manifest this update:     Tue 12 May 2026 22:35:59 +0000
Manifest next update:     Tue 19 May 2026 22:35:59 +0000
Files and hashes:         1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: /xS6TR3u+amTCX9s4tqxYJU5Ln1YwbOrM3enRi8u4Eo=)
                          2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: /3x4vYPiXoG8rAiPY7APpgt+Ap9Ktaa/xQN8yrKkbXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl
                          rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:35:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
        Validity
            Not Before: May 12 22:35:59 2026 GMT
            Not After : May 19 22:35:59 2026 GMT
        Subject: CN=6a03ab50-064b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:b4:26:e7:3b:e6:52:e6:7e:84:69:5d:ab:
                    11:2a:d2:30:f9:d1:23:6c:d3:8f:e0:c8:a4:f4:97:
                    92:26:57:f6:d5:a8:81:99:aa:23:f5:08:14:31:d7:
                    8f:4a:a9:98:19:30:ad:40:58:a1:8d:1b:45:6e:5a:
                    43:00:79:37:4f:f3:ef:ee:2a:f8:33:6a:d1:4c:c8:
                    8d:f8:41:95:8e:96:61:28:fe:45:e9:3b:ef:a2:0f:
                    01:3d:88:68:ed:6d:12:2c:20:cd:df:5d:4a:73:e5:
                    18:a7:3b:9b:7e:f2:16:c1:c6:6c:89:05:de:48:02:
                    52:06:f8:40:3c:e3:1a:72:d9:f6:95:75:15:6e:e0:
                    a2:47:7f:9e:7e:c1:b8:02:1e:de:74:f1:58:b0:5a:
                    23:c2:26:0d:ec:da:5a:2d:d0:d3:d8:85:b7:6f:c0:
                    f6:ad:5d:5f:89:3a:8d:7e:74:51:91:9b:a1:ac:ac:
                    e4:47:a6:e1:18:51:12:4a:e2:2e:92:ce:94:de:16:
                    56:6b:00:aa:22:86:3f:e6:f4:47:98:41:aa:fc:39:
                    f0:61:f9:a8:ef:bd:34:ae:92:66:c1:86:00:56:5c:
                    52:a7:92:06:05:9a:48:cc:32:26:fa:89:14:80:7c:
                    18:e5:21:62:2b:87:11:25:fa:c2:70:35:86:46:89:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:94:4B:57:E7:89:3B:1E:40:98:57:49:53:D7:E8:C2:D0:8A:E7:74
            X509v3 Authority Key Identifier:
                keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:92:d8:aa:e6:b4:d7:9d:e2:96:19:55:77:97:5c:8b:8d:43:
         ed:4c:5b:f2:45:14:54:12:e9:52:fa:7b:e7:90:e7:87:1c:7a:
         80:00:90:e0:a5:01:27:b9:d6:2f:c7:cb:63:72:fb:fb:89:b4:
         ef:40:2a:14:55:03:10:98:33:6f:9c:62:c6:74:42:68:98:41:
         a6:53:04:7f:aa:15:16:c7:4a:93:a1:5b:ff:5b:16:06:5e:26:
         c1:79:aa:c3:01:bf:90:ed:d3:e2:6c:66:b5:ba:f0:8d:c1:ee:
         33:72:44:33:f4:65:10:49:7c:fa:8b:41:93:1f:50:d6:9a:40:
         c2:70:e3:4a:44:d4:5d:b9:b3:12:5d:77:fe:7c:d1:c7:52:54:
         da:ea:88:ac:3a:69:0d:8a:8f:52:16:89:06:0e:b6:c2:5b:8a:
         ed:40:61:f7:1b:2e:c3:cc:77:36:47:e8:b5:0f:5e:c8:8d:0e:
         b4:dd:f0:52:c5:1e:16:54:e2:cc:e8:35:05:4a:66:25:b6:d7:
         f7:ac:1a:12:19:bc:24:71:41:86:7c:9f:00:4c:ff:7b:85:d4:
         39:18:4e:bd:d8:66:1e:a5:87:16:ab:0d:d4:d0:45:61:4d:5b:
         91:c1:29:ef:36:05:7b:ec:79:b2:a4:cc:0b:d1:dc:56:39:fa:
         b3:5b:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:54:47 2026 by rpki-client